2 ms·
"Besides Habalov, another researcher named Max May independently discovered and reported this issue to Google in March 2017." I wonder why they are fixing it n
by A_No_Name_Mouse 8y ago
"Besides Habalov, another researcher named Max May independently discovered and reported this issue to Google in March 2017."
I wonder why they are fixing it now, when they didn't do anything for over a year
- ThePadawan 8y agoThe disclosure is being published now. From the timeline at the bottom of the article, it becomes clear that they only ignored the issue for 2 months. That is still more than zero delay, but a bit more reasonable.
- A_No_Name_Mouse 8y agoHow is that? >"2017-12-06 Fixed with Chrome version 63.0 2018-05-15 Fixed with Firefox Quantum version 60.0" That's 9 months for Chrome and more than a year for FF Quantum?
- andrewaylett 8y agoBut also "2017-11-26 Reported the vulnerability to Mozilla’s VRP" because "due to some misunderstandings on our side, reporting the vulnerability to Mozilla was delayed". So I think "more than a year" is a little unfair to Mozilla.